SSO Overview
Enable secure sign‑in for your users with your existing identity provider (IdP). Willow supports Google, GitHub, Auth0, Okta, Azure, Keycloak, JumpCloud, and ADFS.
Before you start
- You are an admin in both Willow and your IdP
- You know your Willow Gateway URL shown in the app. If not, use
https://connect.mcp-s.com.
Callback URLs
When you configure SSO, your IdP will ask for a callback (redirect) URL. Willow shows it on screen while you configure each provider. The default pattern is:
- Google:
{gatewayUrl}/api/auth/callback/google - GitHub:
{gatewayUrl}/api/auth/callback/github - Auth0:
{gatewayUrl}/api/auth/callback/auth0 - Okta:
{gatewayUrl}/api/auth/callback/okta - Azure:
{gatewayUrl}/api/auth/callback/azure-ad - Keycloak:
{gatewayUrl}/api/auth/callback/keycloak - JumpCloud:
{gatewayUrl}/api/auth/callback/jumpcloud - ADFS:
{gatewayUrl}/api/auth/callback/adfs
Continue to the provider‑specific guide next.